CVE-2017-1489

6.1MEDIUM

Key Information:

Vendor
IBM
Status
Security Access Manager For Web
Vendor
CVE Published:
23 August 2017

Summary

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

Affected Version(s)

Security Access Manager for Web 6.1

Security Access Manager for Web 6.1.1

Security Access Manager for Web 7.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/128687
x_refsource_MISC
http://www.securityfocus.com/bid/100592
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039227
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.